fb6196f2e44da3b5906d75f94521c294_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb6196f2e44da3b5906d75f94521c294_JaffaCakes118
Size

340KB
MD5

fb6196f2e44da3b5906d75f94521c294
SHA1

6c5e37e1eea1de8423dfeb1f19b1bbea5177dff9
SHA256

2c99483da145cff4c10c97087eb01185b5fc679e58b539d0aafc57249f6c7841
SHA512

0d9547e0f8f55832ee923209ce7045a9ba973a13800326d7fcd8c96649403f687349ada519ccb5aa76d059f8d07c0db4223ee539dd4b61f1c3962147c7dcb228
SSDEEP

6144:06pF5Og5Ilaaa/1sxKENEE5mOSa3j7WO4DrAO7k6N663X+d79z4nlgZl:7pF535Ilja/ObNEE7Z3uRrAMn+xB4en

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb6196f2e44da3b5906d75f94521c294_JaffaCakes118

Files

fb6196f2e44da3b5906d75f94521c294_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e9e460df6b6008932995edf44f42aa7f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetLastError
GetModuleHandleA
VirtualProtectEx
GetTempPathA
GetProcAddress

advapi32

ConvertSidToStringSidW

avifil32

EditStreamSetNameA

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 196KB - Virtual size: 683KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ